Privacy Policy

Last updated: August 30, 2026

Draft policy based on standard SaaS practice. Have it reviewed by an attorney if you expect EU/UK visitors (GDPR), California residents (CCPA), or Canadian users (PIPEDA). Replace [Legal entity name] and [Business address] before publishing.

This Privacy Policy describes how [Legal entity name](“Nexus Elite,” “we,” “us”) collects, uses, and shares information when you use our software platform (the “Service”).

1. Information we collect

Account information

When you sign up, we collect your name, email address, and password. When you subscribe to a paid plan, our payment processor Stripe collects billing details (name, address, payment method). We do not store your full card number on our servers.

Content you upload

The Service stores content you add — client contact information, projects, invoices, contracts, proposals, messages, and social post drafts. This content is stored to provide the Service to you and your team.

Usage information

We collect standard technical information when you use the Service, including IP address, browser type, device type, pages visited, and timestamps. We use this for security, debugging, and understanding aggregate usage patterns.

Cookies

We use essential cookies to keep you signed in and to remember your preferences. We do not use advertising or tracking cookies.

2. How we use information

To provide, maintain, and improve the Service;
To process subscription payments and prevent fraud;
To send transactional emails (account confirmations, password resets, receipts, invites, proposals, invoice reminders you initiate);
To respond to your support requests;
To comply with legal obligations;
To secure the Service and investigate abuse.

We do not sell your personal information, and we do not use Your Content to train AI models.

3. Third-party service providers

We share information only with vendors necessary to operate the Service:

Supabase — authentication and database hosting;
Stripe — subscription billing and payments;
Resend — outbound email delivery;
Vercel — application hosting and edge network;

Each vendor has its own privacy policy governing their handling of the data we share.

4. Data retention

We retain Your Content for as long as your account is active. If you cancel your subscription and let your account go dormant, we retain data for up to 30 days after account deletion is initiated, after which we permanently delete it. Transactional records (invoices, payment history) may be retained longer as required by tax law.

5. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you;
Correct inaccurate personal data;
Request deletion of your personal data;
Export your data in a portable format;
Object to certain processing.

To exercise any of these rights, email us at privacy@nexuselite.app. We will respond within 30 days.

6. Security

We use industry-standard measures to protect your information: TLS encryption in transit, encryption at rest, role-based access controls, and row-level security in our database. No system is 100% secure — please use a strong password and enable two-factor authentication when available.

7. Children

The Service is not intended for children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, contact us and we will delete it.

8. International users

The Service is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. or other countries where our vendors operate.

9. Changes to this Policy

We may update this Policy from time to time. We will notify you of material changes by email or through the Service. The “Last updated” date at the top of this Policy reflects the most recent revision.

10. Contact

Questions about this Policy or your data? Reach us at privacy@nexuselite.app or [Business address].